JoelC707
join:2002-07-09
Tucson, AZ
clubs:
| reply to ropeguru
Re: Curiosity about smtp.comcast.net
Nah the AT&T Broadband domain was attbi.com which coincidentally is still in use, check out this traceroute.
C:\Documents and Settings\jcleveland>tracert www.comcast.net
Tracing route to www.comcast.net [216.148.227.202]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.1.254
2 1 ms 1 ms <1 ms 72.17.248.153
3 14 ms 9 ms 9 ms 216-199-75-1.atl.fdn.com [216.199.75.1]
4 7 ms 9 ms 10 ms 216-199-64-233.atl.fdn.com [216.199.64.233]
5 8 ms 10 ms 9 ms border4.s7-11.fdn-2.acs.pnap.net [216.52.194.185]
6 17 ms 9 ms 10 ms core4.ge2-0-bbnet1.acs.pnap.net [64.94.0.6]
7 10 ms 9 ms 10 ms 12.118.184.141
8 65 ms 59 ms 61 ms gbr2-p70.attga.ip.att.net [12.123.197.190]
9 74 ms 71 ms 68 ms tbr2-p013602.attga.ip.att.net [12.122.12.37]
10 79 ms 69 ms 68 ms tbr1-cl13.dlstx.ip.att.net [12.122.2.89]
11 71 ms 82 ms 77 ms tbr1-cl20.la2ca.ip.att.net [12.122.10.50]
12 77 ms 70 ms 69 ms gar4-p300.la2ca.ip.att.net [12.123.222.89]
13 84 ms 79 ms 79 ms idf26-gsr12-1-pos-6-0.rwc1.attens.net [12.122.255.122]
14 83 ms 83 ms 85 ms rwcsbix11-1-6.attbi.com [63.241.85.238]
15 82 ms 79 ms 79 ms 192.168.64.2
16 84 ms 79 ms 79 ms www.comcast.net [216.148.227.202]
Trace complete.
Not only is attbi.com still in use (or at least there is a DNS server authoritative for it) they also used a private, non-routable address just before the server. Firewall maybe? Anyone know why or how they are doing that? I suspect the how is a simple static route but maybe not. |
|
beerbum
Premium
join:2000-05-06
Reading, PA
clubs:
| said by JoelC707  :Nah the AT&T Broadband domain was attbi.com which coincidentally is still in use, check out this traceroute. C:\Documents and Settings\jcleveland>tracert www.comcast.net
Tracing route to www.comcast.net [216.148.227.202]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.1.254
2 1 ms 1 ms <1 ms 72.17.248.153
3 14 ms 9 ms 9 ms 216-199-75-1.atl.fdn.com [216.199.75.1]
4 7 ms 9 ms 10 ms 216-199-64-233.atl.fdn.com [216.199.64.233]
5 8 ms 10 ms 9 ms border4.s7-11.fdn-2.acs.pnap.net [216.52.194.185]
6 17 ms 9 ms 10 ms core4.ge2-0-bbnet1.acs.pnap.net [64.94.0.6]
7 10 ms 9 ms 10 ms 12.118.184.141
8 65 ms 59 ms 61 ms gbr2-p70.attga.ip.att.net [12.123.197.190]
9 74 ms 71 ms 68 ms tbr2-p013602.attga.ip.att.net [12.122.12.37]
10 79 ms 69 ms 68 ms tbr1-cl13.dlstx.ip.att.net [12.122.2.89]
11 71 ms 82 ms 77 ms tbr1-cl20.la2ca.ip.att.net [12.122.10.50]
12 77 ms 70 ms 69 ms gar4-p300.la2ca.ip.att.net [12.123.222.89]
13 84 ms 79 ms 79 ms idf26-gsr12-1-pos-6-0.rwc1.attens.net [12.122.255.122]
14 83 ms 83 ms 85 ms rwcsbix11-1-6.attbi.com [63.241.85.238]
15 82 ms 79 ms 79 ms 192.168.64.2
16 84 ms 79 ms 79 ms www.comcast.net [216.148.227.202]
Trace complete. Not only is attbi.com still in use (or at least there is a DNS server authoritative for it) they also used a private, non-routable address just before the server. Firewall maybe? Anyone know why or how they are doing that? I suspect the how is a simple static route but maybe not. mostly what you are seeing in the traceroute is AT&T's IP backbone.. Major ISP's , like Comcast can purchase bandwidth from them.. usually large and expensive pipes.. tho I do see that one attbi.com IP.. guess it's either a recently bougth out system or they never bothered to change it.. either way they have their routers not configured correctly, as the 192.168.64.2 IP should not be visible at all in a traceroute like that..
link to AT&T backbone services,,
»www.business.att.com/service_fam···nt=whole |
|
JoelC707
join:2002-07-09
Tucson, AZ
clubs:
| Yeah I know all about the AT&T backbone, I wasn't pointing out those hops. I was pointing out the 14th hop and 15th hop. The 14th hop has always resolved to attbi.com so I doubt it is a recently bought system I think they just never changed it. I am in an ex-attbi area (Atlanta) and for about a year after Comcast bought us our attbi.com emails still worked, they just forwarded to the comcast.net emails. Granted that has been a few years since that was shut off but it could be a remnant.
I just thought of this, the attbi.com hop is the router between AT&T and the Comcast equipment. Hops 15 and 16 are the same machine. The webserver itself has a private IP (192.168.64.2) but also has a 1-1 NAT in the router giving it a public IP. If I remember correctly when I do a tracert to my webserver at the office that is setup with a private IP and a 1-1 NAT it responds similarly. The only difference is it responds twice but with it's public IP only like it should. |
|
